$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa File: 8f4c8042-28a7-306f-bc00-576bc266f8e8.roa (raw, json) Hash identifier: L0EYqXNoIhsaY3T5n4dZpnH1OXoo6bsFSNfVzCTCEWc= Subject key identifier: 62:28:0E:92:3A:02:35:85:A7:E7:5A:84:2F:E7:22:0F:B6:CD:96:93 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584546263F812EFCB1EBA2985400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa Signing time: Wed 20 Mar 2024 20:49:43 +0000 ROA not before: Wed 20 Mar 2024 20:49:43 +0000 ROA not after: Tue 18 Jun 2024 20:49:43 +0000 asID: 396982 IP address blocks: 172.253.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:26:3f:81:2e:fc:b1:eb:a2:98:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:49:43 2024 GMT Not After : Jun 18 20:49:43 2024 GMT Subject: CN=091330f8-22b1-4880-8359-10f8bcfb18fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d2:36:50:bf:69:fd:fc:54:74:43:da:d0:df: e7:40:55:f9:02:b1:12:e1:a7:e5:ed:67:b1:67:59: 82:69:3e:36:21:05:48:1f:0f:87:9d:41:af:7a:2f: 10:a3:b6:6f:41:19:e9:6f:3e:4f:16:e3:59:d7:1b: 08:f3:27:2e:5c:55:05:b6:61:e8:6f:2c:cb:ff:70: b0:62:39:a5:15:4f:01:38:f9:44:6d:31:be:e0:aa: 13:32:16:94:c4:86:cf:82:e7:f6:86:77:b4:e9:03: db:2f:57:de:66:ca:bb:0e:18:80:8c:66:c4:ec:2f: f5:d5:2e:ae:ca:05:de:47:07:a0:b8:9d:67:6e:ef: 32:fb:5c:ec:48:7a:e6:88:af:6a:25:6e:0b:ab:3f: 46:88:4f:61:e6:89:a3:f5:ef:db:05:91:ae:7c:d5: 16:c7:ae:ed:cb:90:01:f3:07:dc:10:cb:10:fc:fc: 93:33:8e:5b:97:37:82:00:5e:42:ba:c8:68:fc:f6: ec:c0:33:2a:4a:3a:6e:89:65:76:96:59:ca:ac:75: cf:f8:95:92:a3:3d:d1:42:7d:bc:13:93:77:f8:62: e9:0d:e3:27:1d:e7:9c:eb:ca:db:e9:ca:4b:cc:89: a6:11:7a:3a:39:f9:88:a0:1e:c5:fb:71:8b:61:d3: ba:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:28:0E:92:3A:02:35:85:A7:E7:5A:84:2F:E7:22:0F:B6:CD:96:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:fa:d2:41:57:5e:6b:c2:63:b8:55:8d:b8:a3:66:2b:12:0c: 0b:2e:bc:dc:6d:f3:90:77:a1:04:c1:21:62:a9:9c:d6:88:29: 5a:c3:d0:a8:24:d4:ac:15:5a:97:69:34:34:b8:7f:5c:b5:e0: 9d:8b:85:46:e0:04:e8:9b:06:83:b6:b1:b5:b3:3e:5b:17:6b: a0:df:de:41:e5:5e:4f:e2:ef:7c:3f:2e:f0:7b:25:72:de:62: 32:67:da:df:60:c2:df:c8:ca:4e:a6:43:b8:72:55:79:4a:0a: 9b:9a:bc:32:53:e1:78:2b:05:d6:35:5f:89:bb:aa:77:7a:72: 8c:5a:40:84:11:fe:76:9e:0c:16:c2:66:5b:0e:38:da:0b:33: e6:0f:40:c0:7b:55:38:26:17:f4:6f:39:b3:c7:dc:66:9e:f1: a3:a5:06:d6:3f:03:e5:a7:c6:41:7f:af:17:be:93:d5:e5:76: bf:66:6c:74:f1:da:d4:79:67:43:ac:d4:7b:36:82:f0:b8:64: f1:f8:54:22:f3:7b:b0:78:50:1d:23:45:90:f6:fd:9f:d5:9d: c0:b1:23:24:68:c8:bd:17:21:23:9d:56:e4:e9:10:f3:71:23: 80:ab:52:cb:b1:52:58:11:22:dd:0c:13:8d:12:ca:ea:bc:4d: da:b3:5c:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJj+BLvyx66KYVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNDk0M1oXDTI0MDYxODIwNDk0M1owLzEtMCsGA1UEAxMk MDkxMzMwZjgtMjJiMS00ODgwLTgzNTktMTBmOGJjZmIxOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNI2UL9p/fxUdEPa0N/nQFX5ArES4afl7Wex Z1mCaT42IQVIHw+HnUGvei8Qo7ZvQRnpbz5PFuNZ1xsI8ycuXFUFtmHobyzL/3Cw YjmlFU8BOPlEbTG+4KoTMhaUxIbPguf2hne06QPbL1feZsq7DhiAjGbE7C/11S6u ygXeRweguJ1nbu8y+1zsSHrmiK9qJW4Lqz9GiE9h5omj9e/bBZGufNUWx67ty5AB 8wfcEMsQ/PyTM45blzeCAF5Cusho/PbswDMqSjpuiWV2llnKrHXP+JWSoz3RQn28 E5N3+GLpDeMnHeec68rb6cpLzImmEXo6OfmIoB7F+3GLYdO6XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIoDpI6AjWFp+dahC/nIg+2zZaTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGY0YzgwNDItMjhhNy0z MDZmLWJjMDAtNTc2YmMyNjZmOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErP0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv60kFXXmvCY7hVjbijZisSDAsuvNxt85B3oQTBIWKpnNaIKVrD0Kgk 1KwVWpdpNDS4f1y14J2LhUbgBOibBoO2sbWzPlsXa6Df3kHlXk/i73w/LvB7JXLe YjJn2t9gwt/Iyk6mQ7hyVXlKCpuavDJT4XgrBdY1X4m7qnd6coxaQIQR/naeDBbC ZlsOONoLM+YPQMB7VTgmF/RvObPH3Gae8aOlBtY/A+WnxkF/rxe+k9Xldr9mbHTx 2tR5Z0Os1Hs2gvC4ZPH4VCLze7B4UB0jRZD2/Z/VncCxIyRoyL0XISOdVuTpEPNx I4CrUsuxUlgRIt0ME40Syuq8TdqzXNY= -----END CERTIFICATE-----Generated at Mon May 6 01:59:44 2024 by rpki-client on console-ams.rpki-client.org